(Required) Consent to Collection and Use of Personal Information
OneTherapy Co., Ltd. (the “Company”) collects and uses personal information as described below to provide the AI saju and fortune conversation service, Sajuping. Please read the following carefully before providing your consent.
Article 1 (Personal Information Collected and Collection Methods)
The Company collects the following personal information for smooth customer support, provision of AI saju/fortune services, and service quality improvement.
- [Required] When signing up for membership and using the service
- Collected items: registered name, nickname (including preferred form of address), gender, date of birth (including solar/lunar calendar status), city of birth, time of birth
- Device and automatically collected items: phone number, email, device information (including model name, mobile carrier, OS, device unique identifier, advertising ID, time information, etc.), application information (version, etc.)
- When using social login: linked account information (identifiers and other information provided by Kakao, Naver, Google, Apple, or the applicable service for social login functionality)
- Service usage records: exchanged messages and consultation information (including message transmission time, saju/fortune questions and AI responses, emojis, stickers, images, videos, audio, and other multimedia materials), user reaction information, status information shown to others, access IP, and improper usage records
- [Required] When using paid services
- Collected items: payment method information (information provided by the payment processor, such as partial credit card number and bank account information), payment and transaction records
Article 2 (Purpose of Use of Personal Information)
The Company uses collected personal information for the following purposes.
- Service provision and contract performance: provision of AI saju and fortune conversation services, provision of content (premium interpretations and reports), paid payment processing and settlement (including Ping top-ups), and provision of customized results
- AI algorithm and service improvement: machine learning and algorithm enhancement for AI conversation/interpretation models, development of new services and content, statistical analysis, and service quality improvement
- Member management: identity verification for membership services, prevention of improper use by bad actors and unauthorized use, confirmation of sign-up intent, restriction of registration by children under 14, record retention for customer support and dispute resolution, and delivery of notices
Article 3 (Retention and Use Period of Personal Information)
In principle, the Company destroys personal information without delay after the purpose of collection and use is achieved (for example, upon membership withdrawal). However, where retention is required under applicable laws, the Company retains member information for the periods prescribed by those laws as follows.
- Records concerning contracts or withdrawal of offers: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
- Records concerning payment and supply of goods, etc.: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.)
- Records concerning consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
- Service access and usage records: 3 months (Protection of Communications Secrets Act)
Article 4 (Processing of Pseudonymized Information and AI Training)
- The Company may pseudonymize and use collected personal information (including saju information and conversation history) so that specific individuals cannot be identified, for the purpose of improving the quality of the AI Sajuping service, preparing statistics, and conducting scientific research (including AI algorithm enhancement).
- Processed pseudonymized information is stored and managed safely through physical and technical measures, separated from additional information so that restoration is not possible, and retained until membership withdrawal.
Article 5 (Entrustment of Personal Information Processing)
The Company entrusts certain tasks to external providers as described below for smooth service provision, and specifies necessary matters in entrustment agreements so that personal information is managed safely in accordance with applicable laws.
| Entrusted provider | Entrusted task |
|---|---|
| Supabase | Database storage and server operations |
| AWS (Amazon Web Services) | Cloud infrastructure and data storage |
| Google Cloud (Vertex AI) | AI model services and data processing |
| Google Firebase | Push notifications and app analytics |
| RevenueCat | Subscription payment management |
| OneSignal | App push notifications and marketing message delivery |
| PG company (payment processor) | Paid payment processing such as credit cards and in-app purchases (Ping top-ups) |
| Adison | Offerwall advertising and reward processing |
Article 6 (Overseas Transfer of Personal Information)
The Company may transfer and store personal information overseas as described below to provide services and store data using global cloud servers. Transferred data is stored safely through strong encryption.
| Recipient | Country | Purpose of transfer | Retention period |
|---|---|---|---|
| Supabase | United States | DB storage and server operations | Until membership withdrawal |
| AWS (Amazon Web Services) | United States | Cloud infrastructure and data storage | Until membership withdrawal |
| Google Cloud (Vertex AI) | United States | AI model services and data processing | Until membership withdrawal |
| Google Firebase | United States | Push notifications and app analytics | Until membership withdrawal |
| RevenueCat | United States | Subscription payment management | Payment records: 5 years |
| OneSignal | United States | Push notification delivery | Until membership withdrawal |
The personal information transferred consists of all information collected during membership registration and service use. If you refuse consent, service provision may be restricted.
Article 7 (Rights of Users and Legal Representatives and How to Exercise Them)
- Users may view or modify their registered personal information at any time and may request termination of membership (membership withdrawal).
- Users may directly withdraw by selecting “Settings > Delete Account” in the app.
- The Company does not allow children under 14 to directly register for or use the service. However, if an adult member (legal representative) directly enters a child’s date of birth or other information for the purpose of analyzing the child’s saju, such information is treated as information provided with the consent of the legal representative and will not be used for purposes other than service provision.
Article 8 (Right to Refuse Consent and Disadvantages)
You have the right to refuse consent to this collection and use of personal information. However, this consent is required to provide the Sajuping service, so membership registration and service use may be restricted if you refuse consent.
Article 9 (Personal Information Protection Officer)
The person responsible for overseeing or handling personal information protection matters is as follows.
- Name: Yoonseop Lee
- Email: yoon@sajuping.ai
For personal information protection inquiries, you may contact the email address above or cs@sajuping.ai.